Privacy Policy

Effective date: July 19, 2026

CarMicDuo respects your privacy. This Privacy Policy explains how CarMicDuo (“CarMicDuo,” “we,” “us” or “our”) collects, uses, discloses, retains and protects personal information when you visit carmicduo.com, communicate with us, subscribe to communications, purchase or download a product, request support, use CarMicDuo AI Site Control or its Connection Hub, or otherwise use our digital products and services (collectively, the “Services”).

CarMicDuo operates from Moncton, New Brunswick, Canada. Questions or privacy requests may be sent to our privacy contact at privacy@carmicduo.com.

1. Scope

This Policy applies to personal information controlled by CarMicDuo. It does not replace the privacy policies of third-party marketplaces, payment processors, artificial-intelligence providers, hosting companies, social networks, external websites or other independent services. Those organizations determine how they handle information under their control.

2. Accountability

CarMicDuo is responsible for personal information under its control and has designated its operator as the person accountable for privacy practices. We aim to collect, use and disclose personal information only for purposes that a reasonable person would consider appropriate in the circumstances and in accordance with applicable privacy law.

3. Information we collect

Information you provide

Depending on how you interact with us, you may provide:

  • your name, email address and contact preferences;
  • messages, support requests, survey responses, reviews or other communications;
  • account, order or delivery details, including the product purchased and transaction identifier;
  • information needed to administer a licence, affiliate relationship, website connection or business request; and
  • any other information you choose to include in a communication.

Please do not send passwords, complete payment-card numbers, government identification, health information or other sensitive information unless we specifically request it through an appropriate secure process.

Purchase and marketplace information

When you purchase through a marketplace or payment provider, we may receive information such as your name, email address, country, product, price, currency, order date, transaction ID, payment status, refund or dispute status and affiliate attribution. Payment providers process your payment credentials. CarMicDuo does not receive or store your complete payment-card number when a third party processes the payment.

Information collected automatically

When you use the website or Services, our systems and service providers may collect:

  • internet protocol address, approximate location, browser, device and operating-system information;
  • referring and exit pages, pages viewed, links clicked, timestamps and general interaction data;
  • security, fraud-prevention, diagnostic and error information; and
  • cookie identifiers and your consent preferences.

4. CarMicDuo AI Site Control and the Connection Hub

CarMicDuo AI Site Control is designed to connect an authorized ChatGPT experience with a licensed WordPress website through a controlled connection service referred to as the CarMicDuo Connection Hub or Hub. The Hub helps authenticate the installation, identify available functions, route approved requests and responses, and enforce connection and permission controls.

Pairing and connection information

When a customer pairs or manages a licensed WordPress installation, the Services may process connection and licence information such as:

  • the licensed site URL and installation identifier;
  • the CarMicDuo plugin version and related compatibility information;
  • product activation credentials and licence-validation information;
  • a generated site UUID or comparable unique installation identifier;
  • an encrypted connection secret or other connection-authentication material;
  • OAuth client information used to establish or maintain an authorized connection;
  • permission scopes and the WordPress functions enabled by the website owner;
  • connection status, pairing status, error state and revocation information; and
  • creation, validation, connection, refresh, use and update timestamps.

This information may be used to validate the licence, establish and secure the connection, prevent unauthorized access, determine which tools are available, diagnose connection problems, maintain service integrity and provide support.

WordPress requests routed through the Hub

When a customer asks ChatGPT to perform an enabled WordPress function, information needed to complete that request may pass temporarily through the CarMicDuo Hub. Depending on the function, this may include the tool name, tool arguments, relevant WordPress content, the resulting WordPress response and approved upload data.

For example, a request to review a page may require the page identifier and page content to pass through the Hub, while a request to create or update content may require the proposed title, body, settings and the WordPress response. An approved file upload may require file metadata and file data to pass through the Hub during transfer.

Content retention and request metadata

The CarMicDuo software does not intentionally retain prompt text, tool arguments, WordPress content bodies, uploaded file chunks or tool results after they are no longer needed to transmit and complete the requested operation.

However, hosting, security, content-delivery network, firewall, abuse-prevention and diagnostic systems may retain limited request metadata according to their configurations and retention schedules. Such metadata may include an IP address, request time, route or endpoint, response status, error code, request size, user agent, security event, connection identifier or similar operational information. Diagnostic records should not intentionally include complete content bodies, but incidental capture may occur where a service is configured to record error details or security events.

Information not sent to the Hub

WordPress account passwords are not sent to the CarMicDuo Hub as part of the pairing or tool-routing process. Complete payment-card numbers are not sent to the Hub. Customers should not place passwords, full payment-card numbers or unnecessary sensitive information in ChatGPT prompts, WordPress content fields, upload filenames or support messages.

Website-owner controls

Website owners control which WordPress functions are available through permission switches and related site settings. A connection may be limited to read-only functions or may permit selected content changes. Sensitive or higher-impact functions may require confirmation, explicit administrator approval or a one-time approval process. The site owner can disable functions, revoke a connection or decline a requested action.

5. How we use information

We may use personal information to:

  • operate, secure, maintain and improve the website, CarMicDuo AI Site Control, the Connection Hub and other Services;
  • process orders, deliver products, validate licences and maintain transaction records;
  • pair, authenticate, maintain, revoke and troubleshoot licensed WordPress connections;
  • route customer-authorized WordPress tool requests, responses and approved uploads;
  • enforce permission scopes, administrator approvals and connection safeguards;
  • provide support, answer questions and resolve access, refund or dispute requests;
  • send requested downloads, service messages and transactional communications;
  • send newsletters or marketing messages where you have consented or where otherwise permitted by law;
  • measure website and service performance and understand how visitors use the Services;
  • detect spam, fraud, abuse, security incidents and licence violations;
  • maintain accounting, tax, legal and compliance records;
  • establish, exercise or defend legal claims; and
  • carry out another purpose that we explain when collecting the information or that you authorize.

6. Consent and lawful processing

Where consent is required, we seek consent appropriate to the sensitivity of the information and the reasonable expectations of the individual. You may withdraw consent to optional processing at any time, subject to legal or contractual restrictions and reasonable notice. Withdrawing consent does not affect processing already lawfully completed and may prevent us from providing a requested optional service.

Depending on the applicable law and context, we may also process information to perform a contract, validate or administer a licence, comply with a legal obligation, protect security, prevent fraud, or pursue a legitimate business purpose that does not override your rights.

7. Cookies and similar technologies

Cookies are small files stored on your device. CarMicDuo and its service providers may use:

  • essential cookies needed for security, basic website functions and remembering privacy choices;
  • functional cookies that remember settings and improve convenience;
  • analytics cookies that help us understand website use and performance; and
  • advertising or personalization cookies if those services are enabled and you provide any consent required by law.

The website currently uses CookieAdmin to manage cookie choices and may use Google services connected through Google Site Kit, such as Google Analytics, when enabled. Website forms may be provided through Formlayer. These providers may process technical information and cookie identifiers under their own privacy terms.

You can accept, reject or customize non-essential cookies through the cookie banner. You can also delete or block cookies in your browser. Blocking essential cookies may prevent parts of the website from working properly. Withdrawing cookie consent does not automatically delete cookies already stored in your browser; you may need to remove them using your browser settings.

8. Email and marketing communications

We send commercial electronic messages in accordance with applicable requirements, including Canada’s anti-spam rules where they apply. Marketing emails will identify the sender and include a working unsubscribe method. You can unsubscribe using the link in the message or by contacting us. We may still send non-promotional communications needed to complete a transaction, deliver a purchase, provide requested support, protect security or give required legal notices.

9. When we disclose information

We do not sell or rent personal information for money. We may disclose limited information to:

  • website, hosting, content-delivery, security, firewall, form, consent and analytics providers that help operate, transmit and protect the Services;
  • artificial-intelligence and platform providers, including OpenAI and ChatGPT, when a customer chooses to use those services with CarMicDuo AI Site Control;
  • WordPress and WordPress service providers, including the customer’s own WordPress installation, hosting provider and enabled plugins or integrations;
  • marketplaces and payment providers, including WarriorPlus, Etsy, PayPal or Stripe when they are used for a transaction;
  • affiliate and product-link services, including Amazon Associates country-routing or link-generation services, when enabled or requested;
  • community, automation and export services, including Skool, Zapier or customer-directed CSV exports, where those features are used;
  • licence-validation and activation systems used to confirm entitlement, associate a product with an installation, detect abuse and administer access;
  • email and customer-support providers used to deliver requested communications or manage support;
  • professional advisers and contractors who need the information to provide services and are subject to appropriate obligations;
  • government, regulatory, law-enforcement or legal parties where disclosure is required or permitted by law, needed to protect rights or safety, or necessary to address fraud or abuse; and
  • a successor organization in connection with a legitimate sale, merger, financing, reorganization or transfer of all or part of the business, subject to appropriate confidentiality and legal requirements.

Some privacy laws define certain analytics or advertising disclosures as a “sale,” “sharing” or targeted advertising even when no money is exchanged. Where those laws apply, we will provide required notices and choices.

10. Third-party platforms and integrations

Third-party platforms involved in the Services process information under their own terms and privacy practices. CarMicDuo does not control how an independent provider uses information submitted directly to that provider or processed in the provider’s environment.

  • OpenAI and ChatGPT: Requests made through ChatGPT may be processed by OpenAI according to the customer’s ChatGPT account, plan, settings and OpenAI’s applicable terms and privacy practices.
  • WordPress: WordPress software, the customer’s hosting provider and installed plugins may process and store website content, account data, logs, files and tool results independently of CarMicDuo.
  • WarriorPlus and payment services: Purchases, affiliate attribution, payment, refunds and disputes may be processed by WarriorPlus and applicable payment providers under their own policies.
  • Amazon Associates country routing: When an Amazon link is built or routed for a particular country, an Amazon marketplace or link-routing provider may receive the destination, ASIN, country, affiliate tag and ordinary request metadata.
  • Skool, Zapier and CSV exports: A customer may direct information to a community platform, automation service or downloadable CSV file. Once exported or transferred, that information is controlled by the customer and the receiving service.
  • Hosting, CDN, firewall and security providers: These providers may process IP addresses, request metadata, security events, logs and transmitted data as necessary to host, route and protect the Services.
  • Licence validation: Activation and validation systems may process licence credentials, product identifiers, site information, status, timestamps and related fraud-prevention data.

If you purchase, follow a link, interact with embedded content, connect an integration or communicate through a third-party platform, that platform may collect information independently. Review the provider’s privacy policy, terms and account controls before using the service.

11. International and interprovincial processing

CarMicDuo is based in Canada, but service providers may process or store information in other provinces or countries, including the United States. Information in another jurisdiction may be accessible to courts, governments or law-enforcement authorities under that jurisdiction’s laws. We use reasonable contractual, organizational and technical measures appropriate to the information and service involved.

12. Retention

We retain personal information only as long as reasonably necessary for the purposes described in this Policy, including delivery, support, connection administration, licence administration, fraud prevention, accounting, tax, legal and dispute-resolution needs. Retention periods vary by record type.

Connection records such as site identifiers, licence status, permission scopes, connection state and relevant timestamps may be retained while a connection or licence is active and for a reasonable period afterward where needed for security, support, fraud prevention, legal compliance or dispute resolution. As described above, the CarMicDuo software does not intentionally retain transient prompt text, tool arguments, content bodies, upload chunks or tool results after transmission and completion, although infrastructure providers may retain limited metadata under their configurations.

When information is no longer required, we delete it, anonymize it or securely dispose of it, subject to lawful backup, security-log and record-retention processes.

13. Security and breaches

We use reasonable administrative, technical and physical safeguards appropriate to the sensitivity of the information, such as access controls, encrypted secrets where appropriate, permission scopes, approval requirements, reputable service providers, software maintenance, logging controls and secure transmission where available. No internet service, AI platform, plugin, hosting environment or storage method is completely secure, so absolute security cannot be guaranteed.

Website owners are responsible for maintaining the security of their own WordPress installation, administrator accounts, hosting environment, ChatGPT account and connected third-party services. Connections should be revoked and credentials changed if compromise is suspected.

If a breach creates a legal notification or reporting obligation, we will take the steps required by applicable law.

14. Your privacy choices and rights

Depending on your location and applicable law, you may have the right to:

  • ask whether we hold personal information about you;
  • request access to that information and information about its use and disclosure;
  • request correction of inaccurate or incomplete information;
  • withdraw consent to optional collection, use or disclosure;
  • request deletion, restriction, portability or objection where those rights apply;
  • change cookie choices or unsubscribe from marketing;
  • disable functions or revoke a CarMicDuo AI Site Control connection through the available site controls; and
  • complain to an applicable privacy regulator.

Send a request to privacy@carmicduo.com. Describe your request and the email address, site URL or installation information associated with your interaction. We may need to verify your identity or authority over a connected website before providing access or making changes. We will not ask for more information than reasonably necessary for verification. Legal, security and confidentiality exceptions may limit a request, and we will explain a refusal where required.

15. Children’s privacy

The commercial Services are intended for adults and are not directed to children under 13. We do not knowingly collect personal information from a child under 13 without legally sufficient parental or guardian authorization. If you believe a child has provided personal information, contact us so we can review and, where appropriate, delete it.

16. External links and embedded content

The website and Services may contain external links, embedded content, generated affiliate links or integrations. Visiting, routing to or interacting with that content may allow the third party to collect information. CarMicDuo is not responsible for the privacy practices of external services.

17. Changes to this Policy

We may update this Policy when our practices, providers, Services or legal obligations change. The updated version will be posted with a revised effective date. If a change materially affects how we use information already collected, we will provide any additional notice or seek any consent required by law.

18. Contact and complaints

Privacy Contact — CarMicDuo
New Brunswick, Canada
Email: privacy@carmicduo.com
Website: https://carmicduo.com/

Please contact us first so we can investigate and respond to your concern. If your concern is not resolved, you may have the right to contact the Office of the Privacy Commissioner of Canada or another regulator with jurisdiction.

Powered by CookieAdmin